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Abstract. An access structure specifying the qualified sets of 
a secret sharing scheme must have information rate less than or 
equal to one. The Vamos matroid induces two non-isomorphic 
access structures Vi and Vg, which were shown by Marti- Farrc and 
Padro to have information rates of at least 3/4. Beimel, Livne, 
and Padro showed that the information rates of Vi and Vq are 
bounded above by 10/11 and 9/10 respectively. Here we improve 
those upper boimds to 19/21 for Vi and 17/19 for Vg. 



1. Introduction 

Let P be a set of participants, among whom we would like to share 
a secret. An access structure F on P is the collection of all subsets 
of P that are qualified, i.e., allowed to reconstruct the secret. An 
access structure T is fully determined by its minimal qualified subsets, 
which are those qualified sets for which no proper subset is qualified. 
Any subset of P not in F is called unqualified. We assume that each 
participant in P belongs to some minimal qualified subset. 

We may think of the secret as belonging to a special participant 
called the dealer. Intuitively, a secret sharing scheme for F is a way for 
the dealer to select a secret and deal out one or more shares to each 
participant in such a way that qualified sets are able to reconstruct the 
secret by combining their shares, while unqualified sets cannot learn 
any information about the secret. 

The efficiency of a secret sharing scheme can be measured in terms 
of its information rate, a value which indicates the size of participants' 
shares relative to the size of the secret. The information rate will always 
be between zero and one [2]. Marti- Farre and Padro [1] showed that 
any access structure with information rate greater than | is induced 
by a matroid. 

It is not yet known how to determine the information rates of the ac- 
cess structures induced by a particular matroid. One matroid currently 
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under consideration is the Vamos matroid, which induces two non- 
isomorphic access structures Vi and Vq. Each of these access structures 
is known to have an information rate of at least 3/4 [1], and Beimel, 
Livne, and Padro showed that the information rates of Vi and Vg have 
upper bounds of 10/11 and 9/10 respectively [1] (Beimel et. al. refer 
to Vs rather than Vi, but the two are isomorphic and Vi is notation- 
ally more convenient for our purposes). Here we improve those upper 
bounds to 19/21 for Vi and 17/19 for Vq. 



2. Secret Sharing Schemes 

We now give a more precise definition of a secret sharing scheme, 
following the ideas of Csirmaz [2] and Marti- Farre and Padro [1]. Let 
S be a collection of random variables consisting of one random variable 
S for the secret and, for each participant x G P, a random variable for 
the share belonging to x. 

For any participant x G P, we use H{x) to denote the Shannon 
entropy of the corresponding random variable, and for any nonempty 
subset X C P U {S}, we use H{X) to denote the joint entropy of the 
random variables for all elements of X. We use H{X\Y) to denote 
conditional entropy for nonempty sets X,Y C PU {S}. Recall that by 
definition H{X\Y) = H{X UY) - H{Y). 

We call S a (perfect) secret sharing scheme for V if it has the follow- 
ing properties: 

• If X G F then H{S\X) = 0, that is, the participants in X are 
able to combine their shares to completely determine the value 
of the secret. 

• If X ^ F then H{S\X) = H{S), that is, the uncertainty about 
the secret does not change even when all participants in X pool 
their shares. 

Given a secret sharing scheme S and a participant a; G P, the infor- 
mation rate of x is defined by 



p{x) 



HjS) 
H(x)' 



The information rate of S, is the minimum information rate over 

all participants in P. For an access structure F, the information rate 
p(F) is the supremum of over all S that are secret sharing schemes 
for F. 
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3. Normalized Entropy 

Fix a (perfect) secret sharing scheme S. We define the normalized 
entropy of a nonempty set X C P by 

h(X) - ^^^^ 

and the conditional normalized entropy of X given Y for nonempty sets 
X, r C P by 

hixm - ^^^^^^ 

The entropy function H is nonnegative. We may assume that H{S) 
is strictly positive, because if H{S) = then H{S\X) = for every 
X C P, meaning that every set of participants is quahfied and there 
is nothing left to investigate. Thus the normalized entropy and condi- 
tional normalized entropy are well-defined. We observe that the infor- 
mation rate for a participant x G P is the reciprocal of the normalized 
entropy for that participant: 

The normalized entropy is monotone and submodular, as can be 
shown by dividing through the appropriate inequalities for the entropy 
function by the positive quantity H{S). Some additional useful facts 
about h are described in the following lemmas. We assume that X, Y 
are nonempty subsets of P. We will frequently omit the symbol for set 
union, writing XY for X UY. 

Lemma 1. IfXeT then h{X) = h{XS). 

Proof. From the definitions of (perfect) secret sharing scheme and con- 
ditional entropy, if X G F then 

= H{S\X) = H{XS) - H{X). 

Dividing through by H{S) and rearranging gives the desired result. □ 

Lemma 2. IfX^T then 1 = h{XS) - h{X). 

Proof. From the definitions of (perfect) secret sharing scheme and con- 
ditional entropy, if X ^ F then 

H{S) = H{S\X) = H{XS) - H{X). 

Dividing through by H{S) gives the desired result. □ 

Lemma 3. IfX^T but XF G F then 1 < h{XY) - h{X). 
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Proof. Using the monotonicity of h and lemmas [U and Ej 

1 = h{XS) - h{X) < h{XYS) - h{X) = h{XY) - h{X). 

□ 

Lemma [3] says that if X is unquahfied and adding the participants in 
Y produces a quahfied set, then the participants in Y must contribute 
at least 1 to the normalized entropy of X. A slight reformulation of 
this is the following lemma, which says that if adding a participant r 
to an unqualified superset of X produces a qualified set, then r must 
contribute at least 1 to the normalized entropy of X. 

Lemma 4. If XY ^ Y but XY U {r} G L then 1 < h{X U {r}) - h{X). 

Proof. By lemma [3] 

1 < h{XY U {r}) - h{XY) 

and by the submodularity of h 

h{X) + h{XY U {r}) < h{XY) + h{XU{r}). 

If we add these inequalities, cancel terms, and rearrange, we get the 
desired result. □ 

Lemma 5. IfXnY^T butX,Y eT then 

h{XnY) + h{XY) + l < h{X) + h{Y). 

Proof. By the submodularity of h, 

h{{XnY)S) + h{XYS) < h{XS) + h{YS). 

Since X,Y,XY G F, adding S to any of these sets does not change 
their normalized entropy. However, by lemma [2] 

h{{XnY)S) = h{X nY) + 1. 

□ 

4. Matroids and Secret Sharing Schemes 

A matroid M over a finite set Q is a collection called the indepen- 
dent subsets of Q, such that 

• the empty set is independent, 

• subsets of independent sets are independent, and 

• if X, y are independent with |X| = |y | + 1 there is x & X\Y 
such that Y U {x} is independent. 
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Any set that is not independent is dependent. Maximal independent 
sets are called bases, and minimal dependent sets are called circuits. A 
matroid may also be specified in terms of its bases or circuits. For a 
more thorough introduction to matroids we refer the reader to [5]. 

Given a matroid M over Q, each element x G Q induces an access 
structure over the participants Q \ {x}. The minimal qualified sets 
of are those subsets Y C Q\ {x} for which Y U {x} is a circuit in the 
matroid M. Intuitively, if F U {x} is a circuit then the value of x can 
be determined from the elements of Y. More discussion of matroids 
and access structures may be found in [1]. 



We define the Vamos matroid on the set {vi, . . . , Vg} as follows. First 
define the Vamos pairs A, B, C, and D hj A = {fi,f2}, B = {v^^v^}, 
C = {v^jVq}, and D = {^7,^8}. The Vamos matroid on ABCD is the 
matroid whose independent sets are all sets of size less than 5 except 
for the sets AB, AC, BC, BD, and CD. Thus the sets AB, AC, BC, 
BD, and CD are circuits in the Vamos matroid. Any set of fewer than 
4 elements is independent, and any set with more than four elements 
is dependent. 

In the following discussion when we speak about circuits, indepen- 
dent sets, and dependent sets, we mean these terms with respect to the 
Vamos matroid. 

Because of symmetries there are, up to isomorphism, two access 
structures induced by the Vamos matroid. One is the structure Vi, 
where Vi is the dealer. The other is Vg, where vq is the dealer. For 
convenience we shall consider each of Vi and Vq to be an access struc- 
ture on eight participants, thinking of the dealer as a participant who 
is individually qualified to recover the secret. Recall that the other 
minimal qualified sets will be those sets of participants who, with the 
inclusion of the dealer, form a circuit in the Vamos matroid. Note that 
this means any qualified set which does not contain the dealer must 
include at least 3 participants. 

As in [T], for a fixed secret sharing scheme S on Vi or Vg we define 



5. The Vamos Matroid 



A 




1 



so that for each participant 



(2) 



h{vi) < 1 + A. 
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We note that by equation ([T]) the information rate of the scheme will 
then be 

(3) p(S) = min , = 

^ ^ '^^ ^ i<i<8 h{Pi) 1 + A 

Lemma 6. Let X, Y be distinct Vamos pairs with XY a circuit. If the 
dealer is a member of Y , then 

(i) h{Y\X) < 1 + A 

(ii) h{X\Y) < 1 + 2A. 

Proof. Let Y = {s, t} where s is the dealer, and let X = {p, q}. 

(i) Since XY is a circuit containing the dealer, X U {t} is a qualified 
set. Thus by lemma [H the submodularity of h, and equation ([2]), 

h(Y\X) = h{{t}\X) < h{{t}) < 1 + A. 

(ii) The set {p, t} is unqualified, as it is a set of size 2 that does not 
include the dealer. The set XU{t} is qualified. Thus by lemmaO 

h{{p, t}) + h{XY) + 1 < h{{p} U F) + h{X U {t}). 

Subtracting h{Y) from both sides, rearranging, and using equa- 
tion ([2]) gives us 

h{X\Y) < h{{p}\Y) + h{{q}\{p,t})-l 

< h{{p}) + h{{q}) - 1 

< 2(1 + A) -1 
= 1 + 2A. 

□ 

Lemma 7. Let X, Y be distinct Vamos pairs with XY a circuit. If 
neither X nor Y contains the dealer, then 

h{Y\X) < 1 + 3A. 

Proof. Let Y = {p, q}. Take r to be one of the two participants that is 
neither in XY nor in the Vamos pair of the dealer. Then we will have 
X U {r} ^ r, since adding the dealer to these three elements does not 
produce a circuit. We will have X U {p,r}, X U {q, r} G F, since each of 
these is an independent set with four participants. Then by lemma [5] 
we have 

h{X U {r}) + h{XY U {r}) + 1 < h{X U {p,r}) + h{X U {q,r}). 
Since XY ^ F, by lemma [3] we have 

h{XY) + l < h{XYU{r}). 
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We get the following from the submodularity of h: 

h{XU{p}) < h{X) + h{{p}) 
h{XU{p,r}) < h{X U {p}) + h{{r}) 
h{XU{q,r}) < h{XU{r}) + h{{q}). 

Finally, from equation ([2]), 



MM) 


< 1 - 


hA 


hm) 


< 1 - 


hA 


MW) 


< 1 - 


hA 



Adding the inequalities above, canceling terms, and writing as condi- 
tional entropy gives us the bound specified. □ 

Lemma 8. Let X, Y be distinct Vamos pairs with XY independent. If 
the dealer is not a member of X , then 

2 < h{Y\X). 

Proof. Case 1: Assume that the dealer is not a member of Y. 

Let Y = {p, q}. Since XY is qualified but X U {p}, X U {q} are not, 
by lemma [3] we get the inequalities 

1 <h{XY) - h{X U {p}) 
1 <h{XY) -h{XU{q}). 

By the submodularity of h, 

h{XY) + h{X) < h{X U {p}) + h{X U {q}). 

Adding the above three inequalities, canceling terms, and rearranging 
gives the desired result. 

Case 2: Assume that Y = {s,t} where s is the dealer. Since XY is 
independent, X U {t} is unqualified. Thus by lemma [2] 

1 < h{XY)-h{XU{t}). 

Let r be any participant not in XY. Then X U {r} is also unqualified. 
Since X U {t,r} is qualified, lemma H] tells us that 

1 < h{XU{t})-h{X). 

Adding the above two inequalities gives the desired result. □ 

Although the previous lemma is stated in general terms, it will only 
apply to the Vamos pairs A and D, as any other two distinct Vamos 
pairs are dependent. 
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6. New Bounds For Lambda 

In [1] Beimel, Livne, and Padro found by looking at the Zhang- Yeung 
non-Shannon inequality [6] that when is the dealer, 1/9 < A, and 
when vi is the dealer, 1/10 < A. Here we improve those bounds by 
looking at other non-Shannon inequalities from [3]. 

Theorem 9. // the dealer is a member of C , then 2/17 < A. 

Proof. We use Dougherty, Freiling, and Zeger's inequality (i) from [3], 
which may be written 

(DFZi) < - 3h{A) - 5h{B) - 3h{C) + 8h{AB) 

+ Qh{AC) - 2h{AD) + Qh{BC) + 2h{BD) 
+ 2h{CD) - 9h{ABC) - 2h{BCD). 

Since A,AB,BD and ABC, BCD, AD eT, from lem mas [3l H I and 
|8] we obtain the following inequalities, which we add to fIDFZip with 
the indicated multiplicities: 

9[1 < h{ABC) - h{AB)] 

2[1 < h{BCD) -h{BD)] 

2[2 < h{AD)-h{A)] 

1 < h{AB)-h{A). 

After canceling terms, the sum of inequalities yields 

16 < ~Qh{A) - 5h{B) - 3h{C) + 6h{AC) + 6h{BC) + 2h{CD). 

Rearranging, we obtain 

16 < 6[h{AC) - h{A)] + 5[h{BC) - h{B)] 
+ [h{BC) - h{C)] + 2[h{CD) - h{C)] 

which may be further rewritten as 

16 < 6h{C\A) + 5h{C\B) + h{B\C) + 2h{D\C). 

Replacing each conditional normalized entropy by its upper bound from 
lemma El we get 

16 < 6(1 + A) + 5(1 + A) + (1 + 2A) + 2(1 + 2A). 

This simplifies to 

16 < 14+ 17A 

and we conclude that 2/17 < A. □ 
Theorem 10. // the dealer is a member of A, then 2/19 < A. 
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Proof. We begin with inequality (iv) from [3], which is 

(DFZiv) < - h{A) - 5h{B) - 5h{C) + 6h{AB) 

+ 6h{AC) - 2h{AD) + 8/i(5C) + 2h{BD) 
+ 2h{CD) - 9h{ABC) - 2h{BCD). 

To this we add four inequahties (with indicated multiphcities) to 
cancel out the terms with hlAD), h{ABC), and h{BCD). 
Since AD hvX D ,hy lemma E] 

2[2 < h{AD)-h{D)]. 

Since ABC, BCD G T and BC, CD ^T^hy lemma [3] 

9[1 <h{ABC) - h{BC)] 
2[1 <h{BCD) -h{CD)]. 

Finally, since C combined with either participant in D will still be 
an unqualified set, by lemma H] we have 

1 < h{BC)-h{C). 

After adding the above inequalities to (IDFZivl) . simplifying, and can- 
celing terms we are left with 

16 < -h{A) - bh{B) - Qh{C) - 2h{D) + Qh{AB) 
+Qh{AC) + 2h{BD) 

which can be rearranged into 

16 < bh{A\B) + h{B\A) + Qh{A\C) + 2h{B\D). 
Using the bounds found in lemmas [6] and [TJ we have 

16 < 5(1 + A) + (1 + 2A) + 6(1 + A) + 2(1 + 3A) 
and we conclude that 2/19 < A. 

□ 

The method of canceling terms used here was generalized and applied 
to the other inequalities in [3], after appropriate permutations of letters 
in the other inequalities. However, only bounds for A weaker than those 
shown here were obtained. 
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7. Conclusion 

By theorem [9] and equation (JSj), for any secret sharing scheme S on 
Vq we have 

' 1 + A - 19 

and thus by the definition of information rate for an access structure, 
Similarly, by theorem [10] and equation ([3]), 

These are improvements to the best previously known upper bounds 
for the information rates of the access structures induced by the Vamos 
matroid. 
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